Bruce_Briggs

The default stance of WG firewall is that no traffic can go from 1 firewall interface to another without a policy allowing it. So you will need a policy to allow access From Trusted To Optional unles… (View Post)

There is no restriction on using your 2nd WAN inferface for this. What Multi-WAN setting are you using now? Exactly what times out? The BOVPN connection attempt? Or the Tunnel? A tunnel which has no … (View Post)

A SMB transfer from a device on Trusted to a device on optional does not violate the best practice concept for a DMZ. The default Outgoing policy would allow this. If the Outgoing policy has been dis… (View Post)

A DMZ is just a separation from your trusted LAN. Set up an Optional interface and move your server there - it will be a DMZ. You will still need SNATs to allow access to the server from the Internet… (View Post)

The rules/policies are likely unique to each site - those which need to allow access from a specific DMZ device to resources on a trusted interface. By default, devices on one routed interface can�… (View Post)